$ rpki-client -vvf rpki.apnic.net/member_repository/A91FC77C/1C32D4B0E8AA11E7A230DF14C4F9AE02/6wFhqozbHyTNf-E9XlzlIXulj4I.mft File: 6wFhqozbHyTNf-E9XlzlIXulj4I.mft (raw, json) Hash identifier: zEalBll25X4gp8mJ/6sk1JzX033T+o6CFCP7VENS3sM= Subject key identifier: B8:BD:1A:74:86:55:91:19:D8:91:42:38:62:4D:20:B3:8C:E4:E0:57 Authority key identifier: EB:01:61:AA:8C:DB:1F:24:CD:7F:E1:3D:5E:5C:E5:21:7B:A5:8F:82 Certificate issuer: /CN=A91FC77C/serialNumber=EB0161AA8CDB1F24CD7FE13D5E5CE5217BA58F82 Certificate serial: 16B3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6wFhqozbHyTNf-E9XlzlIXulj4I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FC77C/1C32D4B0E8AA11E7A230DF14C4F9AE02/6wFhqozbHyTNf-E9XlzlIXulj4I.mft Manifest number: 16AA Signing time: Fri 22 Nov 2024 16:40:55 +0000 Manifest this update: Fri 22 Nov 2024 16:40:55 +0000 Manifest next update: Fri 29 Nov 2024 16:40:55 +0000 Files and hashes: 1: 6wFhqozbHyTNf-E9XlzlIXulj4I.crl (hash: FdM7nk/wdyLuvWiwH5RSfqSXb8q14j5X/7050eYfzII=) 2: AAAAE566E8AA11E78A615315C4F9AE02.roa (hash: 2luNT163jGit1kl8MTVctdeerld4oGjojZF7DMgFU0s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FC77C/1C32D4B0E8AA11E7A230DF14C4F9AE02/6wFhqozbHyTNf-E9XlzlIXulj4I.crl rsync://rpki.apnic.net/member_repository/A91FC77C/1C32D4B0E8AA11E7A230DF14C4F9AE02/6wFhqozbHyTNf-E9XlzlIXulj4I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6wFhqozbHyTNf-E9XlzlIXulj4I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 16:30:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5811 (0x16b3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FC77C/serialNumber=EB0161AA8CDB1F24CD7FE13D5E5CE5217BA58F82 Validity Not Before: Nov 22 16:40:55 2024 GMT Not After : Nov 29 16:40:55 2024 GMT Subject: CN=6740b417-8a96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:f1:28:b1:47:78:eb:79:12:1f:3f:bf:d0:04: 88:ec:cc:84:37:28:56:12:1d:6f:e6:f5:49:78:11: a1:ac:b4:33:ff:e7:82:13:0d:41:b5:ba:1a:f5:8a: cc:17:45:2c:36:d2:82:fa:fe:6f:c6:30:3a:f0:4a: 9f:6e:57:59:8e:26:ca:4b:2e:49:f6:fe:0c:af:09: 7e:c6:8b:5f:75:49:fd:ef:51:40:51:d5:59:ca:ca: 6f:e8:aa:8a:25:e0:37:3f:ed:6d:6e:5e:2a:4b:93: 88:50:8f:a0:6d:5e:e8:c2:62:50:e0:3d:eb:a2:67: 43:f5:57:d4:f8:0b:0e:a2:f3:db:9f:fd:9a:4d:fc: 05:61:a2:ef:ba:89:47:7d:61:58:62:2d:ec:d1:68: a0:8e:cc:67:ee:3b:f1:e0:de:10:2c:fa:d8:34:d5: a1:ca:8f:24:76:c0:85:71:05:a2:c8:f0:06:38:96: 5d:09:13:93:a3:a4:f1:fd:10:a3:24:3b:e0:9f:7f: dc:3c:19:c1:29:03:86:48:95:31:68:5b:d9:b0:95: 33:64:85:89:ed:47:38:36:49:45:49:44:f0:7f:4b: cf:df:cd:e0:c5:0a:51:91:dd:90:9e:65:6b:78:88: 30:9f:41:06:8f:17:40:0f:ed:fa:27:7e:55:19:cd: 2a:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:BD:1A:74:86:55:91:19:D8:91:42:38:62:4D:20:B3:8C:E4:E0:57 X509v3 Authority Key Identifier: keyid:EB:01:61:AA:8C:DB:1F:24:CD:7F:E1:3D:5E:5C:E5:21:7B:A5:8F:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FC77C/1C32D4B0E8AA11E7A230DF14C4F9AE02/6wFhqozbHyTNf-E9XlzlIXulj4I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6wFhqozbHyTNf-E9XlzlIXulj4I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FC77C/1C32D4B0E8AA11E7A230DF14C4F9AE02/6wFhqozbHyTNf-E9XlzlIXulj4I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:94:55:21:9d:b0:4e:43:15:6d:42:1d:52:2b:76:26:a6:a9: 66:80:a3:9f:d5:8e:22:5f:65:3c:57:1d:d3:50:03:da:4e:6b: 39:40:fe:7d:a7:ee:2d:04:09:13:cc:ef:6e:2d:89:41:79:8f: 5d:c1:ba:2b:73:67:07:e2:8a:42:88:98:da:53:8d:47:fe:6a: 35:19:f1:99:24:22:ac:07:8f:95:2f:e5:25:1a:b6:3b:6f:0c: 7a:64:3a:17:2e:43:0a:6f:e7:46:1b:da:63:64:44:92:b3:39: 97:40:38:af:cb:88:22:18:25:01:a5:93:c8:02:8e:5c:37:c2: fe:c7:d6:73:cd:24:a3:2e:c5:a7:85:a9:03:fc:04:22:91:01: 16:8e:8b:b5:d4:a9:b9:98:85:4d:3b:88:01:23:76:5b:20:af: 2c:a7:c5:ac:d2:3e:14:da:44:63:79:d9:f0:03:ed:bf:8a:7d: 4c:05:a5:5a:9d:b9:4e:b5:c9:1e:3c:1a:e3:ba:63:ee:02:f2: 4d:52:d0:00:10:37:65:b6:37:7f:01:de:77:2d:46:5e:34:78: 0c:8f:fa:85:39:33:25:d3:2a:a4:30:b8:9e:cb:ff:84:69:cb: f4:89:55:23:dd:d6:fb:a0:61:bf:86:73:0f:43:69:c4:71:ea: 1a:fd:77:a1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFrMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkM3N0MxMTAvBgNVBAUTKEVCMDE2MUFBOENEQjFGMjRDRDdGRTEzRDVFNUNFNTIx N0JBNThGODIwHhcNMjQxMTIyMTY0MDU1WhcNMjQxMTI5MTY0MDU1WjAYMRYwFAYD VQQDEw02NzQwYjQxNy04YTk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvvEosUd463kSHz+/0ASI7MyENyhWEh1v5vVJeBGhrLQz/+eCEw1Btboa9YrM F0UsNtKC+v5vxjA68EqfbldZjibKSy5J9v4Mrwl+xotfdUn971FAUdVZyspv6KqK JeA3P+1tbl4qS5OIUI+gbV7owmJQ4D3romdD9VfU+AsOovPbn/2aTfwFYaLvuolH fWFYYi3s0Wigjsxn7jvx4N4QLPrYNNWhyo8kdsCFcQWiyPAGOJZdCROTo6Tx/RCj JDvgn3/cPBnBKQOGSJUxaFvZsJUzZIWJ7Uc4NklFSUTwf0vP383gxQpRkd2QnmVr eIgwn0EGjxdAD+36J35VGc0qdwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLi9GnSG VZEZ2JFCOGJNILOM5OBXMB8GA1UdIwQYMBaAFOsBYaqM2x8kzX/hPV5c5SF7pY+C MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQzc3Qy8xQzMyRDRCMEU4 QUExMUU3QTIzMERGMTRDNEY5QUUwMi82d0ZocW96Ykh5VE5mLUU5WGx6bElYdWxq NEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZ3Rmhxb3piSHlUTmYtRTlYbHpsSVh1bGo0SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG Qzc3Qy8xQzMyRDRCMEU4QUExMUU3QTIzMERGMTRDNEY5QUUwMi82d0ZocW96Ykh5 VE5mLUU5WGx6bElYdWxqNEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBZlFUhnbBOQxVtQh1SK3YmpqlmgKOf1Y4iX2U8Vx3TUAPaTms5QP59 p+4tBAkTzO9uLYlBeY9dwborc2cH4opCiJjaU41H/mo1GfGZJCKsB4+VL+UlGrY7 bwx6ZDoXLkMKb+dGG9pjZESSszmXQDivy4giGCUBpZPIAo5cN8L+x9ZzzSSjLsWn hakD/AQikQEWjou11Km5mIVNO4gBI3ZbIK8sp8Ws0j4U2kRjednwA+2/in1MBaVa nblOtckePBrjumPuAvJNUtAAEDdltjd/Ad53LUZeNHgMj/qFOTMl0yqkMLiey/+E acv0iVUj3db7oGG/hnMPQ2nEceoa/Xeh -----END CERTIFICATE-----Generated at Fri Nov 22 17:56:23 2024 by rpki-client on console-fra.rpki-client.org